Live and recent posts from across the Fediverse tagged #cve_2025_8088, aggregated by home.social.
📢 Gamaredon 2026 : analyse complète de la chaîne d'infection GammaPhish et GammaWorm
📝 ## 🔍 Contexte
Publié le 1er juin 2026 par l'équipe Threat Detection & Research (TDR) de S...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-07-gamaredon-2026-analyse-complete-de-la-chaine-d-infection-gammaphish-et-gammaworm/
🌐 source : https://blog.sekoia.io/fsbs-matryoshka-1-3-gamaredons-gifts-that-keeps-unpacking-gammaphish-and-gammaworm/
#CVE_2018_20250 #CVE_2025_8088 #Cyberveille
PSA for anyone with Ukrainian-org exposure: Pterodo Wave-2 droppers chain CVE-2025-8088 + CVE-2025-6218 (WinRAR ADS path-traversal + co-exploit). Both patched in WinRAR 7.13.
A lot of UA orgs run WinRAR like a "forever tool" — installed 5 years ago, never updated. That's the soft target for this campaign.
Audit your endpoint inventory. WinRAR ≤7.12 is not a "next sprint" item.
Signatures: ESET `VBS/Pterodo.CTH trojan` on the dropped VBS implant. Florian Roth's `SUSP_RAR_NTFS_ADS` YARA on the archive itself.
Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia
#Amaranth_Dragon #CVE_2025_8088 #AmaranthLoader #TGAmaranthRAT
https://research.checkpoint.com/2026/amaranth-dragon-weaponizes-cve-2025-8088-for-targeted-espionage/
Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088
#CVE_2025_8088 #RomComGroup #APT44 #TEMP.Armageddon #Gamaredon #Turla #zeroplayer
https://cloud.google.com/blog/topics/threat-intelligence/exploiting-critical-winrar-vulnerability
WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)
#CVE_2025_8088 #RomComGroup #PaperWerewolf
https://www.helpnetsecurity.com/2025/08/12/winrar-zero-day-cve-2025-8088-attacks/
📢 Zero‑day WinRAR (CVE‑2025‑8088) exploité par RomCom : mettez à jour vers 7.13
📝 Source et contexte — WeLiveSecurity (ESET Research) publie une analyse d’exploitation active d’...
📖 cyberveille : https://cyberveille.ch/posts/2025-08-12-zero-day-winrar-cve-2025-8088-exploite-par-romcom-mettez-a-jour-vers-7-13/
🌐 source : https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/
#CVE_2025_8088 #IOC #Cyberveille
Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability
#RomComGroup #CVE_2025_8088
https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/
